EAST Search History 



Ref 

# 


Hits 


Search Query 


DBs 


Default 
Operator 


Plurals 


Time Stamp 


LI 


717 


726/22.ccls. 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


AND 


OFF 


2006/11/22 09:59 


L2 


3563 


709/227.ccls. 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


AND 


OFF 


2006/11/22 09:59 


L3 


1877 


370/235. eels. 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


AND 


OFF 


2006/11/22 09:59 


L4 


0 


1 (rst top sequence acknowledgement 
packet flow). dm. 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


AND 


OFF 


2006/11/22 10:06 


L5 


17 


1 rst top 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


AND 


OFF 


2006/11/22 10:07 


L6 


1071 


rst top 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM.TDB 


AND 


OFF 


2006/11/22 10:07 


L7 


7 


rst nearl attack 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


AND 


OFF 


2006/11/22 10:08 


L8 


617 


6 (sequence or value) (acknowledge 
or ack) 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


AND 


ON 


2006/11/22 10:10 



11/22/2006 10:13:22 AM 



Page 1 



EAST Search History 



L9 



165 



8 (dos or (denial near2 service)) 



US-PGPUB; 
USPAT; 
USOCR; 
EPO; JPO; 
DERWENT; 
IBM TDB 



AND 



ON 



2006/11/22 10:11 



11/22/2006 10:13:22 AM 



Page 2 



tcp reset rst ack - Google Scholar 



Page 1 of 2 



Google 

Scholar w beta 



I tcp reset rst ack 



Search 



Advanced Scholar Search 
Scholar Preferences 
Scholar Help 



Scholar All articles Recent articles Results 1 - 10 of about 2,570 for tcp reset rst ack. (0.13 seconds) 



All Results 

S Savage 
V Paxson 
R Morris 
C Schuba 
T Ptacek 



A Weakness in the 4.2 BSD UNIX TCP/IP Software - group of 3 » 

RT Morris - Computing Science Technical Report No, 1 985 - ja.net 

... Each TCP connection also maintains a sequence number as part of its state. The packet 

flags SYN, ACK, and RST (synchronize, acknowledge, and reset), as well as ... 

Cit ed by 109 - Relate d Articles - Vi ew as HT ML - Web Search 

[ps] TCP and successive fast retransmits - g roup of 10 » 

S Floyd - Time (in Seconds) - icir.org 

... See Figure 2. First, the Tahoe-style TCP source receives three duplicate ACKs, infers 
a ... The rst ACK for packet 141 causes the source to transmit packet 142. ... 
Cited by 65 - Related Articles - View as HTML - Web Search 



Analysis of a Denial of Service Attack on TCP - group of 71 » 

C Schuba, I Krsul, M Kuhn, E Spafford, A Sundaram, ... - Proceedings of the 1997 IEEE 

Symposium on Security and 1997 - doi.ieeecomputersociety.org 

... generated by D. Not ex- pecting a SYN+ACK without having ... to D, and consequently 

cause 

D to reset the connection ... The basis of the attack is that TCP/IP does not ... 

C ited by 160 - Relate d Articles - Web Search - BL Direct 



[ps] A Simple Active Attack A g ainst TCP - gr oup of 89 » 
L Joncheray - usenix.org 

... SV R ACK CLT SEQ and SV R TO CLT OFFSET refers to CLT ACK SV R SEQ then the 
rst 

party attacker has to rewrite the TCP packet from the client to the server as: ... 
Cited by 62 - Related Articles - Web Search 

[book] Probing TCP Implementations - grou p of 7 » 
DE Comer, JC'Lin - 1993 - bell-labs.com 

... thepeer TCP torespondwith an ACK segment if the connection is still alive; if the 
peer has dropped the connection, it will respond with a reset (RST) segment ... 

Cited by 23 - Related Articles - View as HTML - Web Search - Librar y Search 



[psj TCP SYN Flooding Defense - group of 4 » 

L Ricciulli, P Lincoln, P Kakkar - Comm. Net. and Dist. Systems Modeling and Simulation 
Conf.( 1999 - metanetworks.org 

... If the last ACK message sent to the server is ... that is not directly addressed by the 
TCP standard and ... The reset cookies scheme is the only one that provides ... 

Cited by 17 - Related Articles - View as HTML - Web Search 



[psj TCP splicing for application layer proxy performance - g roup of 4 » 

D Maltz, P Bhagwat - IBM Research Report RC, 1998 - thefengs.com 

... over the connection a sequence number so TCP can detect ... una: The sequence number 

of the rst unacknowledged data ... the sequence number of the greatest ACK received ... 

Cited by 65 - Related Arti cle s - Vie w as HTML - W eb Sear ch 

[ps] Insertion, evasion , and denial of service: Eludin g network intrusion 
detection - group of 46 » 



http://scholar.googlexom/scholar?q^cp+reset+rst+ack&hl=en&lr= 



11/22/2006 



tcp reset rst ack - Google Scholar 



Page 2 of 2 



TH Ptacek, TN Newsham - 1998 - icir.org 

... may resolve conicting TCP segments dierently depending on its OS Section 5.5.1 
Destination OS Destination may not check sequence numbers on RST messages ... 
Cited_by„319 - ReJatedjMicJes - View as HTML - Web Search 

Nonintrusive TCP connection admission control for bandwidthmanagement of 
an Internet access link - grou p o f 6 » 

A Kumar, M Hegde, SVR Anand, BN Bindu, D ... - Communications Magazine, IEEE, 2000 - 
ieeexplore.ieee.org 

... TCP RST messages during the TCP connection establishment phase. Since the approach 
is nonintrusive, the CAM promiscuously captures SYN and SYN-ACK packets ... 

Cj.ted.by_.26 - Related Articles - WebSearch - BLQirect 

A probabilistic a p proach to detecting network scans - group of 3 » 

C Leckie, R Kotagiri - Network Operations and Management Symposium, 2002. NOMS 2002 

2002 - ieeexplore.ieee.org 
... SYN packet with a TCP SYN-ACK packet if it is willing to establish a connection, 
or a TCP RST- ACK packet if the requested port is closed. ... 
Cited„by„22 - Related Articles - WeJ^Jtearch 



Result Page: 



Goooooooooog le ► 

1 2345678910 Next 



tcp reset rst ack 



Search 



Google Home - About Google - About Google Scholar 



©2006 Google 



http://scholar.google.com/scholarf^ 



11/22/2006 



tcp attack - Google Scholar 



Page 1 of 2 



Advanced Scholar Search 
Scholar Preferences 
Scholar Help . 

Scholar All articles Recent articles Results 1 - 10 of about 15,900 for tcp attack (0.13 seconds) 

Anal ysis of a Denial of Service Attack on TCP - g roup of 71 » 
C Schuba, I Krsul, M Kuhn, E Spafford, A Sundaram, ... - Proceedings of the 1 997 IEEE 
Symposium on Security and .... 1997 - doi.ieeecomputersociety.org 
Page 1 . Analysis of a Denial of Service Attack on TCP ... The basis of the attack is 
that TCP/IP does not offer strong authentication on its control packets. ... 
Cited b y 160 - Related Articles - Web Search - BL Direct 



[ps] A Simple Active Attack A g ainst TCP - g roup o f 8 9 » 
L Joncheray - usenix.org 

... Simple Active Attack Against TCP Laurent Joncheray Merit Network, Inc. Ann Arbor, 
Ml 48105, USA Page 2. A Simple Active Attack Against TCP Laurent Joncheray ... 

Cited b y 62 - Related Articles - Web Search 

TCP/IP security threats and attack methods - g roup of 4 » 

B Harris, R Hunt - Computer Communications, 1999 - 202.1 13.12.9 

... This article classifies a range of known attack methods focusing in particular on 

SYN flooding, IP spoofing, TCP sequence number attack, TCP session hijacking ... 

Cite d b y 63 - Related Articles - View as HTML - Web Search 

[citation] Analysis of a denial of service attack on TCP 

CLSIV Krsul, MG Kuhn, EH Spafford, A Sundaram, D ... - Proceedings of the 1997 IEEE 
Symposium on Security and .... 1997 
Cited by 56 - Related Articles - Web Search 

Defending against low-rate TCP attacks: dynamic detection and protection - 
g roup of 11 » 

H Sun, JCS Lui, DKY Yau - Network Protocols, 2004. ICNP 2004. Proceedings of the 12th 
.... 2004 - ieeexplore.ieee.org 

... We consider a distributed approach to detect and to de- fend against the low-rate 
TCP attack [7]. The low-rate TCP attack is essentiallya periodic short burst ... 
Cited by 1 1 - Rela ted A rticl es - W eb Search 

A taxonomy of DDoS attack and DDoS defense mechanisms - grou p of 42 » 
J Mirkovic - ACM SIGCOMM Computer Communication Review, 2004 - portal.acm.org 
... For example, in the TCP SYN attack, the exploited feature is the allocation of 
substantial space in a connection queue im- mediately upon receipt of a TCP SYN ... 

Cited by 121 - R elated Articles - W eb Sea rch - BL Direct 

Security problems in the TCP/IP protocol suite - group of 230 » 

SM Bellovin - ACM SIGCOMM Computer Communication Review, 1989 - portai.acm.org 

... maintenance or a reboot. A variant on this TCP sequence number attack, 

not described by Morris, exploits the netstat tsl service. ... 

Cited b y 396 - Related Articles - Web Search 

TCP con g estion control with a misbehaving receiver - grou p of 48 » 
S Savage, N Cardwell, D Wetherall, T Anderson - ACM SIGCOMM Computer 
Communication Review, 1999 - portal.acm.org 

... YY(N)YNYYYYYYYYYYYYYY Table 1 : For each TCP Daytona attack, we 




I tcp attack 



Scholar 



Search 



All Results 

J Mirkovic 
KPark 
C Schuba 
M Kuhn 
E S pafford 



http://scholar.google.com/scholar?q=tcp+attack&hl=en&lr= 



11/22/2006 



tcp attack - Google Scholar 



Page 2 of 2 



denote with a "Y" those operating systems that we found to be vulnerable. ... 
Cited by 104 - Related. Articles - Web Search - BL Direct 

[citation] Eugene H. spafford, Aurobindo Sundaram, Diego Zamboni, Analysis 
of a Denial of Service Attack on TCP 

CL Schuba, IV Krsul, MG Kuhn - Proceedings of the 1997 IEEE Symposium on Security and 
Cited, by 23 - Related Articles - Web Search 

Attacking DDoS at the source - group of 8 » 

J Mirkovic, G Prier, P Reiher - Network Protocols, 2002. Proceedings. 10th IEEE .... 2002 - 
ieeexplore.ieee.org 

... A solid line represents the traffic passed to the victim in the case of a UDP attack, 
a dotted line represents the case of a TCP attack, and a dash-dotted line ... 

Cited by 99 - Related Articles - Web Search 



Goooooooooog le ► 



Result Page: 



1 2 3 4 5 6 7 8 9 10 Next 



tcp attack 



Search 



Google Home - About Google - About Google Scholar 



©2006 Google 



http://scholar.google.com/scholar?q=tcp+attack&hl=en&lr= 



11/22/2006 



top attack M rst packet" - Google Scholar Page 1 of 2 




tcp attack "rst packet" 



Search 



Advanced Scholar Search 
Scholar Preferences 
Scholar Help 



Scholar w beta 

Scholar All articles Recent articles Results 1 - 10 of about 269 for tcp attack "rst packet ". (0.15 seconds) 



All Results 

V Paxson 
C Schuba 
H Wang 
E Spafford 
D Zamboni 



Anal ysis of a Denial of Service Attack on TCP - group of 71 » 

C Schuba, I Krsul, M Kuhn, E Spafford, A Sundaram, ... - Proceedings of the 1997 IEEE 

Symposium on Security and .... 1997 - doi.ieeecomputersociety.org 

... Figure 8. Attack scenario: synkill gener- ates RST packet in response to ... Synk:ill 

completes TCP connections by generat- ing the third message of the three ... 

Cited by 160 - Related Articles - Web Search - BL Direct 

[psj A Simple Active Attack A g ainst TCP - grou p o f 89 » 
L Joncheray - usenix.org 

... the rst connection when it receives the RST packet and then ... The success of the attack 
relies on the correct value ... but will put both end of the TCP session in ... 
Cited by 62 - Related Artic les - Web Search 

A Weakness in the 4.2 BSD UNIX TCP/IP Software - g roup of 3 » 
RT Morris - Computing Science Technical Report No, 1985 - ja.net 

... insecure enough to supply appropriate powers after a determined attack. ... acknowledge 
it and put the destination TCP port in ... to C, and C sends a RST packet to B ... 

Cited by 109 - Re late d A rticle s - View as HTML - Web Search 



Detecting SYN flooding attacks - g roup of 6 » 

H Wang, D Zhang, KG Shin - INFOCOM 2002. Twenty-First Annual Joint Conference of the 
.... 2002 - ieeexplore.ieee.org 

... If a SYN flooding attack is detected at the first ... beginning (SYN) and end (FIN) of 
each TCP connection. ... While the RST packet violates the SYN-FIN pair, for any ... 
Cited by 144 - R elated Articles - Web Search - BL Direct 

A Rule-based Approach for Port Scanning Detection - gr oup of 8 » 

U Kanlayasiri, S Sanguanpong, W Jaratmanachot - Proceedings of the 23 rdElectrical 

Engineering Conference, 2000 - anreg.cpe.ku.ac.th 

... the full connection but TCP half-connect, on the other hand, will employ RST packet 
to close ... Stealth or TCP FIN scanning plays a role of attack by sending ... 
Cited by 10 - Related Articles - View as HTML - Web Search 



Defendin g ag ainst a Denial-of-Service Attack on TCP - group of 5 » 
P Mutaf - Proceedings of the Recent Advances in Intrusion Detection 1999 - inrialpes.fr 
... which may be different for different implementations of TCP. ... In the case of an attack, 
the client's ... a timeout period) the gateway sends a RST packet in order ... 

C|ted_byj_0 - Re lated Articles - View as HTM L - Web Search 



Using router stamping to identify the source of IP packets - groupjDf_8 _» 

TW Doeppner, PN Klein, A Koyfman - Proceedings of the 7th ACM conference on Computer 

and 2000 - portal.acm.org 

... For the rst packet R1 writes in slot 1 that it received the packet on ... Due to space 
limitations we concentrate on the TCP SYN Flooding Attack as our example ... 
Cited by 28 - Related Articles - Web Search 

The TIME-WAIT state in TCP and its effect on busy servers - g roup of 13 » 
T Faber, J Touch, W Yue - INFOCOM'99. Eighteenth Annual Joint Conference of the IEEE 
1999 - ieeexplore.ieee.org 



http://scholar.google.com^ 11/22/2006 



top attack " 



rst packet" - Google Scholar 



Page 2 of 2 



... the connection with an <RST> packet. (The connection is aborted as though it failed 
to synchronize, and intro- duces no new failure modes to TCP.) Aborting the ... 

Cited by_21 - Related. Articles - Web jiearch - BL Direct 

Detecting network intrusions via a statistical analysis of networkpacket 
characteristics - group of 18 » 

M Bykova, S Ostermann, B Tjaden - Southeastern Symposium on System Theory, 2001 . 
Proceedings 2001 - ieeexplore.ieee.org 

... information about hosts and net- works and can be viewed as a prelude to attack. 
In this paper, we collect and analyze all of the IP and TCP packets seen on a ... 

Cited by .19 - Related Articles - Web Search - BLBirect 

Usin g embedded sensors for detecting network attacks - group of 14 » 
F Kerschbaum, EH Spafford, D Zamboni - Proceedings of the 1st ACM Workshop on 
Intrusion Detection .... 2000 - cerias.purdue.edu 

... This attack sends a forged TCP RST packet and disconnects an established TCP 
connection, whose port numbers the attacker knows or guesses [12]. ... 
Cjted.by 13 - Related Articles - View as.HTML - Web Search 



Result Page: 



Goooooooooogle ► 

1 2345678910 Next 



tcp attack "rst packet" 



Search 



Google Home - About Google - About Google Scholar 



©2006 Google 



http://scholar.google.com/sc^ 11/22/2006 



tcp attack "rst bit" - Google Scholar 



Page 1 of 2 




[I 



itcp attack "rst bit" 



Scholar w beta 
Scholar All articles Recent articles 



Search 



Advanced Scholar Search 
Scholar Preferences 
Scholar Help 



Results 1 - 10 of about 55 for tcp attack "rst bit". (4.67 seconds) 



All Results 

S Bellovin 

C Cranor 

M Fullmer 

E Gansner 

B Krishnamurth... 



TCP/IP Securit y 

C Chambers, J Dolske, J Iyer - LinuxSecurity. com, http://www. linuxsecurity. com/ 
1998 - linuxsecurity.com 

... is first closed via the RST bit, and then ... as a stepping stone towards a more 
complicated 

spoofing attack. ... one of the inherent vulnerabilities in TCP/IP, based ... 
Cited b y 4 - Related Articles - Cached - Web Search 

An analysis of TCP reset behaviour on the internet - g roup of 2 » 

M Arlitt, C Williamson - ACM SIGCOMM Computer Communication Review, 2005 - 

portal.acm.org 

... genuine (ie, not a delayed duplicate, or a replay attack). ... recy- cled for use as 
another TCP connection state ... The reset (RST) bit in the TCP packet header is ... 
Cited by 4 - Related Articles - Web Search 



[book] Managing TCP/IP Networks: Techniques, Tools , and Securit y 
Considerations - group_of 2 j> 
G Held - 2000 - doi.wiley.com 

... 4 TheTransport Lay er 73 4.1 TCP 73 4.1 .1 The TCP header 74 Source and 
Destination 

Port ©elds 74 Port numbers ... 79 PSH bit 79 RST bit 79 SYN bit 79 FIN bit 79 ... 

Cited by 3 - R elate d Arti cles - W eb Search 

[book] Bulletproofing TCP/IP-based Windows NT/2000 networks 
G Held - 2001 - doi.wiley.com 

... 71 URG bit 71 ACK bit 72 PSH bit 72 RST bit 72 SYN ... fact that when done correctly 
this type of attack may go ... Bulletproo®ng TCP/IP-based Windows NT/2000 
Networks ... 
Web Search 



[Psi Internet Engineering Task Force Sally Floyd INTERNET DRAFT ICIR 
draft-floyd-tcp-reset-03. txt April. ... 
ITCPRC Harmful - icir.org 

... This document defined the RST bit in the TCP header, and explained ... appears to be 
that anyone can effectively "attack" a new TCP function simply by ... 
View as HTML - Web Searc h 



Automatic Verification of Transmission Control Protocol Using NuSMV - 

g roup of 2 » 

J Lu, Y Zhu - cs.toronto.edu 

... is set and the ACK is acceptable, the next state is CLOSED; 3. If the RST bit is 
set ... We first use our model to confirm the TCP SYN flooding attack and then ... 
Related Articles - View as_ HTML - Web Search 



[ps] Internet En g ineering Task Force Sally Floyd INTERNET DRAFT ICIR 
draft-flovd-tcp-reset-03a. txt March ... 
ITCPRC Harmful - icir.org 

... This document defined the RST bit in the TCP header, and explained ... appears to be 



http://scholar.google.com/scholar?M^ 



11/22/2006 



top attack " 



rst bit M - Google Scholar 



Page 2 of 2 



that anyone can effectively "attack" a new TCP function simply by ... 
RelaJedJ^rtides - View as JHTjVIL - Web Search 

Characterizing large DNS traces using graphs - group of 14 » 
CD Cranor, E Gansner, B Krishnamurthy, O ... - Proceedings of the First ACM 
SIGCOMM Workshop on Internet 2001 - portal.acm.org 

... least one of the TCP packets had the RST bit set and ... addresses were targets for an 
denial of service attack using II? ... were removed as il- legal in the TCP graph ... 
Qjted_by 12 - Related Articles - Web Search - BL Dire ct 

RFC 3668. Internet-Drafts are working documents of the Internet 
En g ineering Task Force (IETF) , its ... 

TCP Maintenance, MF Gont - gont.com.ar 

... When receiving a segment with the RST bit set, or an ICMP ... proposed in this 
document 

neither strengthens nor weakens TCP's resistance to attack. ... 

Related Article s - View as HTM L - Web Search 

Securin g The Network With Cisco Router 
BS Tan, NR Authentication - sans.org 

... first is when the TCP session ends via a FIN or RST bit. ... about the state of TCP and 
UDP connections. ... is that it can be used to combat denial-of-service attack. ... 
View as HTML - Web Search 



Goooooog le ► 



Result Page: 



1 2 3 4 5 6 Next 



tcp attack "rst bit' 



Search 



Google Home - About Google - About Google Scholar 



©2006 Google 



http://scholar.google.com/scholar?hl^^ 



11/22/2006 



